Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.

Doniyorkhon Obidov

dblp:429/7655 · DBLP profile ↗
← Back
1ranked-venue papers
1as first author
1since 2021 · last 2026
—ORCID · unresolved

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 1 · 1 first-author · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 first-author · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Security and privacy of machine learning · 100%
Artificial intelligence
1 paper
Language models and text generation · 100%

Topics — the 3 heaviest of 3, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Natural language and speech › Language models and text generation › prompting › prompt engineering
prompt optimization
1.012026
Dynamic Deep Prompt Optimization for Defending Against Jailbreak Attacks on LLMs · AAAI 2026
Security and privacy of machine learning
adversarial attack
1.012026
Dynamic Deep Prompt Optimization for Defending Against Jailbreak Attacks on LLMs · AAAI 2026
Security and privacy of machine learning › adversarial attack
jailbreak attack
1.012026
Dynamic Deep Prompt Optimization for Defending Against Jailbreak Attacks on LLMs · AAAI 2026

Methods — techniques the papers use, named apart from their topics

deep prompt optimization · 2.0multilayer perceptron · 1.0multi-layer perceptron · 1.0
YearPublicationVenuePosition
2026 Dynamic Deep Prompt Optimization for Defending Against Jailbreak Attacks on LLMs
abstract
Large Language Models (LLMs) demonstrate impressive capabilities across many applications but remain vulnerable to jailbreak attacks, which elicit harmful or unintended content. While model fine-tuning is an option for safety alignment, it is costly and prone to catastrophic forgetting. Prompt optimization has emerged as a promising alternative, yet existing prompt-based defenses typically rely on static modifications (e.g., fixed prefixes or suffixes) that cannot adapt to diverse and evolving attacks. We propose Dynamic Deep Prompt Optimization (DDPO), the first jailbreak defense based on deep prompt optimization. DDPO uses the target LLM's own intermediate layers as feature extractors to dynamically generate defensive embeddings via a lightweight multilayer perceptron. These tailored embeddings are then injected into a subsequent intermediate layer, enabling an input-dependent defense without modifying the LLM's weights. This design ensures high adaptability with minimal computational overhead. Experiments on a diverse set of models and attacks demonstrate that DDPO significantly outperforms static prompt optimization methods, particularly on weakly aligned models and when handling semantically ambiguous benign prompts, successfully distinguishing them from genuinely harmful requests.
Doniyorkhon Obidov, Honggang Yu, Kaichen Yang
AAAI1